Back to Home

    Privacy Policy

    Last updated: July 29, 2026

    1. Introduction

    CX Tools ("CX Tools Directory", "us", "we", or "our") is the website cx.tools (the "Service"), operated by the site owner named in our site notice (Impressum). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service.

    2. Information We Collect

    Log Data

    We collect information that your browser sends whenever you visit our Service ("Log Data"). This Log Data may include information such as your computer's Internet Protocol ("IP") address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, and other statistics.

    Cookies

    Cookies are files with small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and stored on your computer's hard drive. We use "cookies" to collect information and improve our Service.

    Account Data (Vendors)

    If you register as a vendor to manage a paid listing, we collect the information you provide during registration and account use, such as your name, email address, password (stored in hashed form), and business or listing details. This data is stored in our database provider, Supabase (see Section 7).

    Tool Interaction Data

    When you interact with tool listings (for example, viewing a tool's detail page or clicking through to a tool provider's website), we record the tool, the type of interaction, and the time it occurred. This usage data is stored in our database provider, Supabase, and is used to produce aggregate performance reports for vendors and to improve the directory. It is not used to identify you personally.

    3. How We Use Your Information

    We use the collected data for various purposes:

    • To provide and maintain our Service
    • To notify you about changes to our Service
    • To provide customer support
    • To gather analysis or valuable information so that we can improve our Service
    • To monitor the usage of our Service
    • To detect, prevent and address technical issues
    • To display relevant advertisements

    4. Legal Basis for Processing (GDPR)

    Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

    • Consent: You have given consent for processing for specific purposes (e.g., analytics, advertising cookies). You can withdraw consent at any time through our cookie consent manager.
    • Legitimate Interests: Processing is necessary for our legitimate interests, such as improving our Service, ensuring security, and preventing fraud, provided these interests are not overridden by your rights.
    • Legal Obligation: Processing is necessary for compliance with legal obligations to which we are subject.

    5. Data Retention

    We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

    • Analytics data: Retained for up to 26 months (Google Analytics default retention period)
    • Cookie consent preferences: Retained until you clear your browser data or withdraw consent
    • Contact form submissions: Retained for up to 3 years for customer service purposes
    • Server logs: Retained for up to 90 days for security and troubleshooting purposes

    After the retention period expires, your data will be deleted or anonymized.

    6. Data Storage and Security

    The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

    7. Third-Party Services

    Google Analytics

    We use Google Analytics to analyze the use of our website. Google Analytics gathers information about website use by means of cookies. The information gathered relating to our website is used to create reports about the use of our website. Google's privacy policy is available at: https://www.google.com/policies/privacy/

    Usercentrics

    We use Usercentrics for cookie consent management. Usercentrics processes data necessary for providing the consent management service. You can find more information about Usercentrics' privacy practices at: https://usercentrics.com/privacy-policy/

    PostHog

    We use PostHog for product analytics to understand how visitors use the directory. PostHog may set cookies and process data such as your IP address, device and browser information, pages viewed, and interactions with the site. Analytics processing is subject to your consent preferences. You can find more information about PostHog's privacy practices at: https://posthog.com/privacy

    Supabase

    We use Supabase as our database, authentication, and hosting provider. Supabase stores data such as vendor account details and tool interaction data on our behalf. You can find more information about Supabase's privacy practices at: https://supabase.com/privacy

    Formspree

    We use Formspree to process and deliver submissions from our contact form. Data you enter into the contact form (such as your name, email address, and message) is transmitted through Formspree in order to reach us. You can find more information about Formspree's privacy practices at: https://formspree.io/legal/privacy-policy/

    International Data Transfers

    Some of the third-party providers listed above may process or store data on servers located outside the European Economic Area (EEA), including in the United States. Where personal data is transferred outside the EEA, we rely on appropriate safeguards for such transfers, such as the European Commission's Standard Contractual Clauses or an adequacy decision, to ensure your data receives an equivalent level of protection.

    CX Concierge: Recommendation Engine

    Our website features a "CX Concierge" search and recommendation tool that helps you find CX tools from our directory. By default, recommendations are generated using a keyword-based matching engine that runs entirely on our servers. No personal data is sent to any third party when the keyword engine is used.

    If AI-assisted recommendations are enabled, your search query (the text you type into the concierge) may be sent to a third-party AI service provider for processing. The AI provider may temporarily process your query to generate a response. We only send your search query text. We do not send your name, email, IP address, or any other personal information to the AI provider. The AI provider's processing is governed by their own privacy policy and data retention terms.

    Queries sent to the AI provider are not used to train or improve their models beyond what is described in the provider's own terms. We cache query responses on our servers for up to 5 minutes to improve performance. We do not store your search queries long-term or link them to your identity.

    You can identify whether a response was AI-assisted by the "AI-assisted" or "Catalog search" label displayed beneath each recommendation. If you prefer not to use the AI-assisted mode, you can use the standard "Search" tab in the concierge, which uses only the keyword engine.

    8. Data Controller

    The data controller responsible for your personal data is the site operator named in the site notice.

    Email: contact@cx.tools

    9. Your Rights Under GDPR

    If you are a resident of the European Union (EU) and European Economic Area (EEA), you have certain data protection rights:

    • Right to access: You have the right to request copies of your personal data
    • Right to rectification: You have the right to request that we correct any information you believe is inaccurate
    • Right to erasure: You have the right to request that we erase your personal data, under certain conditions
    • Right to restrict processing: You have the right to request that we restrict the processing of your personal data
    • Right to object to processing: You have the right to object to our processing of your personal data
    • Right to data portability: You have the right to request that we transfer the data that we have collected to another organization
    • Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement

    To exercise any of these rights, please contact us at contact@cx.tools. We will respond to your request within 30 days.

    10. Children's Privacy

    Our Service does not address anyone under the age of 16 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 16. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us.

    11. Changes to This Privacy Policy

    We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.

    12. Contact Us

    If you have any questions about this Privacy Policy, please contact us: